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The method involves a unique data support device for each user and two 
authftnf . inflf ion codes. The first is for access to the network and the other is 
for access to a service. The authentication codes must be verified before 
access is permitted. The network access code is numerically deducted from the 
service access code and is verified by comparison with the initial service 
access code. The system includes a service access module (33) and a network 
access module (4) . The modules perform code deduction and access control 
operations . 



ABSTRACT : 



1 of 1 



1/15/02 11:34 AM 



Record Display Form 



http://westbrs:8820/bin/gate.exe?f=doc&s. . .ge=&p_Message=&p_doccnt= 1 &p_doc_ 1 =PTFFRO 




□ 



Generate Collection 



L46 : Entry 4 of 6 



File: EPAB 



Jan 8, 1998 



PUB-NO: WO009800956A2 

DOCUMENT- IDENTIFIER : WO 9800956 A2 

TITLE: SYSTEM AND METHOD FOR PREVENTING CELLULAR FRAUD 
PUBN-DATE: January 8, 1998 
INVENTOR- INFORMATION : 

NAME COUNTRY 
JORDAN, DAVID P 
REED, ELAINE 
MCMAHON, KEVIN 

ASS IGNEE - INFORMATION : 

NAME COUNTRY 
MCI COMMUNICATIONS CORP US 

APPL-NO: US09711316 
APPL-DATE: June 30, 1997 

PRIORITY-DATA: US67463796A (June 28, 1996) 
INT-CL (IPC) : H04M 0/ 

EUR-CL (EPC) : H04M003/38; H04Q007/38 
ABSTRACT : 

A system and method for authgnH rating a telephone to a telecommunications 
network prior to connecting a telephone call. The present invention programs a 
cellular telephone with a telephone identifier. When a caller uses the cellular 
telephone to make a call, the telecommunications network automatically routes 
the call to an an then t i t i on platform. There is one authfmti raUnn platform in 
the telecommunications network for receiving all cellular calls. The cellular 
telephone sends a call origination to the anhhpnt- inahinn platform including an 
electronic serial number (ESN) and a mobile iripnt-.ifi naHnn number (MIN) . The 
authentication platform returns a random challenge to the cellular telephone. 
The cellular telephone generates a response by encrypting the random challenge 
with its ESN, MIN and a unique telephone identifier and sends the response to 
the authentication platform. The auMiPnf irahinn platform generates an 
anticipated response by encrypting the random challenge with the ESN and MIN 
provided in the originating call and with a telephone identifier retrieved from 
a local database. The authentication platform compares the response from the 
cellular telephone with its anticipated response to anhhp.nHrai-P the call. If 
the response and the anticipated response match, the ant.hpnf.i rat-i on platform 
allows the call to complete; otherwise, the anthpni-irahinn platform terminates 
the call. 
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(54) Title: SYSTEM AND METHOD FOR PREVENTING CELLULAR FRAUD 
(57) Abstract 

A system and method for authenticating a telephone to a telecommuni- 
cations network prior to connecting a telephone call. The present invention 
programs a cellular telephone with a telephone identifier. When a caller 
uses the cellular telephone to make a call, the telecommunications network 404 
automatically routes the call to an authentication platfonn. There is one 
authentication platfonn in the telecommunications network for receiving all 
cellular calls. The cellular telephone sends a call origination to the authen- 
tication platform including an electronic serial number (ESN) and a mobile 
identification number (MIN). The authentication platfonn returns a random 
challenge to the cellular telephone. The cellular telephone generates a re- 
sponse by encrypting the random challenge with its ESN, MIN and a unique 
telephone identifier and sends the response to the authentication platform. 
The authentication platfonn generates an anticipated response by encrypting 
the random challenge with the ESN and MIN provided in the originating 
call and with a telephone identifier retrieved from a local database. The 
authentication platform compares the response from the cellular telephone 
with its anticipated response to authenticate the call. If the response and 
the anticipated response match, the authentication platform allows the call 
to complete; otherwise, the authentication platform terminates the call. 
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An integrated voice gateway system 
for use within a company which can route a 
voice telephone call between parties at two 
different locations over an IP network or 
over the PSTN. The system can route a voice 
telephone call from a first Location within 
the system to a second location within the 
system via the IP network, and then from 
the second location to a third location via the 
PSTN. The integrated voice gateway system 
includes a gateway server which serves as 
an intranet/Internet telephony gateway. The 
gateway server routes intra-company voice 
or facsimile (fax) calls, over the company's 
intranet or the public Internet The gateway 
server provides an alternate voice network 
to the PSTN for a company. This alternate 
network is provided at a much lower cost. 
The gateway server is a combination of 
hardware and software components which 
reside on a PC server platform. The gateway 
server is coupled to a customer premise 
telephone system, U. a PBX via a Tl or El trunk for larger systems, or an analog trunk for smaller systems. The gateway server 
is coupled to the company's intranet via industry standard connections. The gateway servers in a multi-site company are coupled together 
via the company's intranet or wide area network (WAN) into a gateway network. The gateway server uses PBX call status links to provide 
many unique and useful features which are otherwise unavailable. The gateway server uses Tl inband ANI, PRI, QSIG or industry standard 
CTI applications programming interfaces (API) and works with any PBX which supports any of these call status links. The gateway 
server is equipped with a database of user and gateway objects and attributes, and provides many unique features including caller's name 
based on caller phone number, address translation, gateway network routing information, user authentication, etc. This database can be 
integrated with industry standard enterprise directory services systems including any directory which supports the Lightweight Directory 
Access Protocol (X.500) (LDAP) interface. 




